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DETAILED ACTION 



1. This is a Non-Final office action in response to Applicant's request for 
continuation examination. 

Claims 1-6 and 8-22 have been re-examined and a further search have 
been performed. 

Claims 7 and 23 are cancelled. 

2. Claims 1-6 and 8-22 are rejected under 35 U.S.C. 102(b). 



Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or 
in public use or on sale in this country, more than one year prior to the date of application for 
patent in the United States. 



3. Claims 1-6 and 8-22 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Sudia, et al. (US 5,825,880). 
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As per claim 1: 

Sudia teaches in a node operative within a network of a plurality of 
nodes, a method for performing cryptographic-related functions comprising: 

executing an application program at the node which need not be highly 
secured; [(col. 3, lines 28-29 and col. 7, lines 33-34); A "node which need 
not be highly secured" can broadly interpret as a node that involves some 
kind of security which does not mean the node or the environment is 
unprotected. The limitation "not to be highly secured" does not read the 
same as a node is not secured or unprotected. Hence, Sudia's network 
includes a node that is not highly secured because the node contains 
some kind of protection when it is requested to perform cryptographic 
related processing such as the signing device involving public /private 
keys.] 

receiving an input requiring cryptographic-related processing; (col.7, 
lines 12-13) 

generating a message via the application program based on the input 
(col.7, lines 34-52), the message representing one of a predefined set of 
messages (col.8, lines 10-11 and col. 11, lines 6-15) for processing by a 
cryptographic processing component (col. 9, lines 9-13) located within the 
network node (col.7, lines 53-65); 

transmitting the message to the cryptographic processing component; 
and (col.7, lines 41-42) 
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performing the cryptographic-related processing (col. 10, lines 5-46). 
As per claim 2: 

Sudia discloses verifying a digital signature wherein includes encrypting and 
decrypting data (col.6, lines 32-42), retrieving the digital certificate (col. 10, 
lines 15-38), verifying the hierarchy (col.l, lines 24-38), and self-signed 
certificate processing (col.7, lines 45-52) within the node. Further, Sudia 
discloses certificate age checking in the form of time stamping (col. 9, lines 13- 
16). 

As per claim 3: See col. 11, lines 9-22 and col. 16, lines 35-67 discusses 
generating a function call message representing a request for performing a 
predetermined cryptographic related functions. 
As per claim 4: 

Sudia discloses generating an output message via the application program 
wherein the output message requiring cryptographic-related processing (col. 11, 
lines 6-10), transmitting one of predefined the messages (col. 11, lines 10-13) to 
the cryptographic processing component (col.9, lines 9-13) to perform the 
cryptographic-related processing (col.9, lines 55-56), and outputting the 
processed message (col.l 1, lines 17-18). 
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As per claim 5: 

Sudia teaches a computer readable medium having stored thereon a 
plurality of sequences of instructions that may be invoked by a plurality of 
predefined messages executed by a processor in an environment which not be 
highly secure, cause said processor to perform a method comprising: 

receiving an input representing one of predefined messages; (col. 8, lines 
10-11 and col. 10, lines 10-14) 

transmitting, based on the input (col.9, line 64 - col. 10, lines 2), 
generating a function call message (col. 8, lines 24-55) representing a request 
(col. 11, lines 6-9) for performing a predetermined cryptographic related 
functions (col. 11, lines 9-22 and col. 16, lines 35-67); and 

perform the cryptographic-related processing (col. 10, lines 15-30). 
As per claim 6: 

Sudia discloses verifying a digital signature wherein includes encrypting and 
decrypting data (col.6, lines 32-42), retrieving the digital certificate (col. 10, 
lines 15-38), verifying the hierarchy (col.l, lines 24-38), and self-signed 
certificate processing (col. 7, lines 45-52) within the node. Further, Sudia 
discloses certificate age checking in the form of time stamping (col. 9, lines 13- 
16). 

As per claim 7: Cancelled 

As per claim 8: See col.l 1, lines 6-13. 
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As per claim 9: 

Sudia discloses in an environment which need not be highly secure, a 
cryptographic module, comprising: 

a memory configured to operate within an environment and to store a 
plurality of cryptographic processing programs, each program being invoked 
via one of a plurality of predefined messages; and (col.9, lines 3-18) 

a processor configured to operate within an environment and to: (col.8, 
line 67 - col.9, line 2) 

receive an input requiring cryptographic-related processing, (col.7, 
lines 34-40) 

generates one of predefined messages based on the input, (col.8, 
lines 10-11 and col. 10, lines 10-14) 

transmit the message to the first one of the cryptographic 
processing programs, and (coL9, lines 55-56 and col. 10, lines 15-30) 

to perform the cryptographic-related processing, (col. 11, lines 9- 
22 and col. 16, lines 35-67) 
As per claim 10: 

Sudia discloses verifying a digital signature wherein includes encrypting and 
decrypting data (col.6, lines 32-42), retrieving the digital certificate (col. 10, 
lines 15-38), verifying the hierarchy (col.l, lines 24-38), and self-signed 
certificate processing (col.7, lines 45-52) within the node. Further, Sudia 
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discloses certificate age checking in the form of time stamping (col.9, lines 13- 
16). 

As per claim 11: See col. 7, lines 34-45; discussing transmit a function call to 
the first cryptographic processing program. 

As per claim 12: See col. 11, lines 6-13; discussing transmit the result of the 
cryptographic-related processing to an application program. 
As per claim 13: 

Sudia includes cryptographic module comprising: 

means, operative in the environment (col. 6, lines 25-30), for storing a 
plurality of cryptographic processing programs that is invoked via one of the 
plurality of predefined messages; (col. 8, lines 10-11 and col. 10, lines 10-14) 

means, operative in the environment, for receiving an input requiring 
cryptographic-related processing; (col.7, lines 34-40) 

means, operative in the environment, for generating the one of predefined 
messages based on the input; (col. 8, lines 45-55) 

means, operative in the environment, for transmitting the message to the 
first one of the cryptographic processing programs, and (col.9, lines 9-13) 

means, operative in the environment, for performing the cryptographic- 
related processing. (coLlO, lines 5-46) 
As per claim 14: 

Sudia discusses a method of performing cryptographic-related functions 
in a node coupled to other nodes in a network environment which need not be 
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highly secure, the node includes an application program for handling 
communications with the other nodes the method comprising: 

receiving in said node within the environment (col.3, lines 28-29 and 
col. 6, lines 22-30) an input requiring cryptographic-related processing; (col.7, 
lines 34-40 and lines 53-54) 

generating in said node within the environment a predefined message 
(col.8, lines 10-11) based on the input (col.9, line 64 - col. 10, lines 2), the 
message one of a plurality of predefined message usable by of the 
cryptographic processing programs executed by the network node; (col.9, lines 
9-13 and lines 55-56) 

transmitting in said node within the environment a predefined message 
to the cryptographic processing program; (col. 10, lines 10-14) 

performing in said node within the environment, via cryptographic 
processing program the desired cryptographic-related operation, (col. 11, lines 
9-22 and col. 16, lines 35-67) 
As per claim 15: See col. 11, lines 38-52. 
As per claim 16: 

Sudia discusses the method of requests for digital generation, verification, data 
encryption and decryption (col.6, lines 32-42), retrieval of digital certificate 
(col. 10, lines 15-38), verifying the hierarchy (col.l, lines 24-38), self-signed 
certificate processing (col.7, lines 45-52), and certificate age checking in the 
form of time stamping (col.9, lines 13-16). 
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As per claim 17: See col.6, lines 4-19 and col. 7, lines 8-15; discussing the 
RSA signature scheme and the MD5 scheme. 

As per claim 18: See col.6, lines 4-19 and col. 7, lines 8-15 ; discussing the 
RSA signature scheme and the MD5 scheme. 

As per claim 19: See col.6, lines 4-19 and col. 7, lines 8-15; discussing the 
RSA signature scheme and the MD5 scheme. 

As per claim 20: See col.6, lines 4-19 and col. 7, lines 8-15; discussing the 
RSA signature scheme and the MD5 scheme. 

As per claim 21: See col.6, lines 24-30; discusses accessing a remote server 
via the network to retrieve cryptographic related information. 
As per claim 22: 

Sudia discloses a computer-readable medium that stores instructions 
executable by at least one processor in an environment which need not be 
highly secure to perform a method for providing cryptographic-related 
functions, the method comprising: 

receiving in at least one processor in the environment (col. 3, lines 28-29 
and col.7, lines 33-34) a first function call from a predefined list of function 
calls, the predefined list of function calls (coL8, lines 10-11 and 11, lines 8- 
15) representing available cryptographic-related functions executable by the at 
least one processor; (col. 8, line 62 - col. 9, line 18) 

generating in at least one processor in the environment a request 
message based on the first function call (col.7, lines 34-40), a for 
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cryptographic processing to further transmit the request message representing 
a request for processing by (col. 11, lines 6-22 and col. 16, lines 35-67) a 
cryptographic processing module executed by the at least one processor; (col.9, 
lines 9-18 and lines 55-56) 

transmitting in at least one processor in the environment the request 
message to the cryptographic processing module; and (col. 10, lines 10-14) 

performing in at least one processor in the environment the 
cryptographic-related processing, (col. 10, lines 31-38) 



Conclusion 



Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to LEYNNA T. HA whose telephone 
number is (571) 272-3851. The examiner can normally be reached on Monday 
- Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on (571) 272-3859. The fax 
phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see 
http://pair-direct.uspto.gov. Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 
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